數(shù)據(jù)完整性 / Data Integrity


「釋義」
數(shù)據(jù)完整性是信息安全的三個(gè)基本要點(diǎn)之一,指在傳輸、存儲(chǔ)信息或數(shù)據(jù)的過程中,確保信息或數(shù)據(jù)不被未授權(quán)的篡改或在篡改后能夠被迅速發(fā)現(xiàn)。
通常使用數(shù)字簽名、散列函數(shù)等手段保證數(shù)據(jù)完整性。
「應(yīng)用場(chǎng)景」
此刻,數(shù)據(jù)完整性就是我們知道自己需要的好東西——現(xiàn)在采取行動(dòng)好不算太晚?!锻顿Y公司法》構(gòu)想的審計(jì)委員會(huì)監(jiān)督的是人員和流程,而不是技術(shù)和數(shù)據(jù)(現(xiàn)代計(jì)算機(jī)直到1955年才被用于企業(yè)的會(huì)計(jì)職能部門)。今天,數(shù)據(jù)完整性是先進(jìn)制造、網(wǎng)絡(luò)安全和靈活運(yùn)營的基礎(chǔ)。就像20世紀(jì)30年代的財(cái)務(wù)報(bào)告一樣,數(shù)據(jù)是盈利能力的核心基礎(chǔ),但缺乏一個(gè)誠實(shí)的經(jīng)紀(jì)人。結(jié)果如何?對(duì)信息的不對(duì)稱控制扭曲了企業(yè)內(nèi)及企業(yè)外的競(jìng)爭決策。希望保持領(lǐng)先地位的公司可以——并且應(yīng)該——主動(dòng)成立一個(gè)數(shù)據(jù)完整性委員會(huì)。
Right now, data integrity is a good that we know we need — and it’s not too late for action. The audit committee envisioned by the Investment Company Act would oversee people and process, not technology and data (the modern computer was not used for company accounting functions until 1955). Today, data integrity is foundational to advanced manufacturing, cybersecurity, and operational agility. Like financial reporting in the 1930s, data forms a central basis for profitability but lacks an honest broker. The result? An asymmetric control of information that distorts competitive decision-making both within and outside companies. Companies that want to stay ahead of the curve can — and should — proactively create a Data Integrity Committee.
以上文字選自《哈佛商業(yè)評(píng)論》中文版2020年12月刊《董事會(huì)應(yīng)增設(shè)數(shù)據(jù)完整性委員會(huì)》
布拉德·基韋爾(Brad Keywell)丨文
馬冰侖?丨編輯?